Week Notes 24#24 (3 mins read).
What happened in the week of 2024-06-10?
by 
Jamie Tanna
.
#week-notes.
Kind articles
Dependency Management Data's web application can now be deployed as a single static binary (2 mins read).
Announcing dependency-management-data's embedded SQL browser interface.
Using Go's database/sql to query an arbitrary columns of unknown type(s) (3 mins read).
How you can query an unknown number of columns, of unknown types, with Go's SQL package.
by Jamie Tanna
.
#blogumentation
#go.
Week Notes 24#23 (3 mins read).
What happened in the week of 2024-06-03?
by Jamie Tanna
.
#week-notes.
My workflow for writing SQL(ite) queries (2024 edition) (4 mins read).
Writing about my recent workflow for writing, executing, and sharing SQL queries with others.
by Jamie Tanna
.
#blogumentation
#sql
#sqlite
#neovim
#datasette
#lsp.
Week Notes 24#22 (4 mins read).
What happened in the week of 2024-05-27?
by Jamie Tanna
.
#week-notes.
Calculating the GitHub API's sha representation of a local file (2 mins read).
How to locally calculate the same sha of a given file, so you can compare it against the GitHub API's representation.
by Jamie Tanna
.
#blogumentation
#github
#go.
Week Notes 24#21 (3 mins read).
What happened in the week of 2024-05-20?
by Jamie Tanna
.
#week-notes.
Week Notes 24#20 (5 mins read).
What happened in the week of 2024-05-13?
by Jamie Tanna
.
#week-notes.
Making it easier to schedule cross-timezones, with the tz CLI (3 mins read).
Writing a command-line tool with Charm's Go libraries to compare the suitability of meetings across timezones.
by Jamie Tanna
.
#blogumentation
#command-line
#go
#charm
#elastic
#remote-work.
Week Notes 24#19 (4 mins read).
What happened in the week of 2024-05-06?
by Jamie Tanna
.
#week-notes.
Installing Google Cloud CLI components on Arch Linux (2 mins read).
How to install gcloud components using pacman, instead of using the officially supported method.
by Jamie Tanna
.
#blogumentation
#arch-linux
#google-cloud
#serverless.
I'm on Cup o' Go! (2 mins read).
Announcing my appearance on Cup o' Go, talking about oapi-codegen, OpenAPI, working on Open Source and blogging.
by Jamie Tanna
.
#openapi
#oapi-codegen
#podcast
#adhd
#blogging
#public-speaking
#go.
Responsible Disclosure: Using GitHub Search (without logging in using SSO) still allows searching (4 mins read).
Reporting on a HackerOne responsible disclosure that I found in GitHub, where you could exfiltrate data without signing in to GitHub SSO.
Creating a more sustainable model for oapi-codegen in the future (9 mins read).
Announcing a request for sponsorship to continue to allow allocating more time to oapi-codegen as well as to make more ambitious changes to the project.
oapi-codegen is moving to its own org (7 mins read).
Announcing oapi-codegen's move to its own GitHub org, and a history lesson about the project.
Week Notes 24#18 (4 mins read).
What happened in the week of 2024-04-29?
by Jamie Tanna
.
#week-notes.
Lessons learned self-hosting Renovate (13 mins read).
What I've learned operating Renovate as a self-hosted app on GitHub Actions, GitLab CI, and the Mend Renovate Community Edition, and some tips for getting started
Week Notes 24#17 (3 mins read).
What happened in the week of 2024-04-22?
by Jamie Tanna
.
#week-notes.
Automating the syncing of files between repos with GitHub Actions (2 mins read).
Creating a GitHub Action workflow to periodically update vendored files which are out-of-sync between GitHub repos.
Week Notes 24#16 (5 mins read).
What happened in the week of 2024-04-15?
by Jamie Tanna
.
#week-notes.
Week Notes 24#15 (5 mins read).
What happened in the week of 2024-04-08?
by Jamie Tanna
.
#week-notes.
Querying your organisation's Renovate configuration using SQL(ite) (3 mins read).
A new tool, renovate-config-sqlite to pull Renovate configuration into an SQLite database.
Why I recommend Renovate over any other dependency update tools (10 mins read).
Explaining why Renovate is going to be my solution to keeping up-to-date with dependencies and it's not likely to change any time soon.
by Jamie Tanna
.
#blogumentation
#renovate
#dependabot
#snyk.
Week Notes 24#14 (4 mins read).
What happened in the week of 2024-04-01?
by Jamie Tanna
.
#week-notes.
Week Notes 24#13 (4 mins read).
What happened in the week of 2024-03-25?
by Jamie Tanna
.
#week-notes.
What can we learn about the backdooring of xz/liblzma, using OpenSSF Security Scorecards and dependency-management-data? (6 mins read).
Looking at how the recent CVE-2024-3094 vulnerability could provide insight into other cases of risk in dependencies and their lack of code review.
by Jamie Tanna
.
#dependency-management-data
#security
#open-source.
Week Notes 24#12 (4 mins read).
What happened in the week of 2024-03-18?
by Jamie Tanna
.
#week-notes.
Week Notes 24#11 (5 mins read).
What happened in the week of 2024-03-11?
by Jamie Tanna
.
#week-notes.
Week Notes 24#10 (3 mins read).
What happened in the week of 2024-03-04?
by Jamie Tanna
.
#week-notes.
What routes is my http.ServeMux listening for? (2 mins read).
How to fairly quickly list the routes that your http.ServeMux is handling, pre- and post-Go 1.22.
by Jamie Tanna
.
#blogumentation
#go.
Why is Go 1.22's enhanced routing not working for me? (2 mins read).
Why you may be receiving 404 page not found errors when using Go's new enhanced routing in Go 1.22.
by Jamie Tanna
.
#blogumentation
#go.
Week Notes 24#09 (7 mins read).
What happened in the week of 2024-02-26?
by Jamie Tanna
.
#week-notes.
Job titles are bullshit (6 mins read).
When is a Senior Engineer not a Senior Engineer, no standardisation across the industry, and other reasons job titles are frustrating.
by Jamie Tanna
.
#career.
Week Notes 24#08 (4 mins read).
What happened in the week of 2024-02-19?
by Jamie Tanna
.
#week-notes.
Week Notes 24#07 (4 mins read).
What happened in the week of 2024-02-12?
by Jamie Tanna
.
#week-notes.
I'm on Changelog and Friends! (2 mins read).
Announcing my first podcast appearance on Changelog and Friends, talking about salary history, the IndieWeb, ADHD and dependency-management-data, among other things.
by Jamie Tanna
.
#podcast
#adhd
#salary
#indieweb
#public-speaking
#dependency-management-data.
You should listen to The Changelog (5 mins read).
Why you should really be adding The Changelog (and its network of podcasts) to your rotation of tech podcasts.
by Jamie Tanna
.
#podcast.
Gotcha: Don't try and authenticate to URLs generated by GitHub Actions Artifacts v4 (3 mins read).
Why you may be receiving errors when trying to authenticate to download GitHub Actions Artifacts using the v4 Actions.
Week Notes 24#06 (4 mins read).
What happened in the week of 2024-02-05?
by Jamie Tanna
.
#week-notes.
Quantifying your reliance on Open Source software (State of Open Con version) (20 mins read).
A writeup of my talk about the dependency-management-data project at the State of Open Con 2024 conference.
by Jamie Tanna
.
#dependency-management-data
#public-speaking
#state-of-open-con
#soocon24
#open-source
#free-software
#sbom.
Week Notes 24#05 (3 mins read).
What happened in the week of 2024-01-29?
by Jamie Tanna
.
#week-notes.
Celebrating dependency-management-data's first birthday (6 mins read).
Reflecting on the last year of the project.
Week Notes 24#04 (4 mins read).
What happened in the week of 2024-01-22?
by Jamie Tanna
.
#week-notes.
Introducing insight into your dependencies' health in dependency-management-data (2 mins read).
How you can use the new dependency health functionality to better understand your dependencies.
dependency-management-data now has a logo! (1 mins read).
Very excited to note that the project now has a logo.
Why am I getting Too many arguments with vault? (1 mins read).
Why you may be getting Too many arguments from the vault CLI, and how to fix it.
Week Notes 24#03 (4 mins read).
What happened in the week of 2024-01-15?
by Jamie Tanna
.
#week-notes.
Using renovate-to-sbom with the GitHub Dependency Submission API (4 mins read).
How to improve the data in GitHub's Dependency Graph by using an SBOM produced by Renovate data.
by Jamie Tanna
.
#dependency-management-data
#renovate
#sbom
#github.
Comparing the different Merge Request / Pull Request merge methods in GitLab and GitHub (2 mins read).
How the different merge methods for contributions work between GitLab and GitHub.